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[57] ABSTRACT 

A subscription television system in which individual 
decoders are enabled to receive individually addressed 
messages is disclosed. The composite signal, including 
video and teletext, also comprises addressed packets, 
which are detected by decoders and which indicate that 
a message addressed to a particular subscriber is forth- 
coming, and system control data. The decoder detects 
an addressed packet addressed to itself, whereby it is 
enabled to select the appropriate teletext message and to 
display the same. In a preferred embodiment, both ad- 
dress packets and teletext are encrypted. The addressed 
packet is decrypted using a decoder-specific code and a 
system key transmitted as part of the system control 
data, while the teletext packet is decrypted using the 
system key, but cannot be received until the addressed 
packet has been decrypted. Therefore, redundant levels 
of security are provided to the system. Messages for 
display to the user can be selected in response to user 
initiated commands, in response to decoder initiation, or 
in response to the transmitter. In each case, the bulk of 
the data to be displayed is repetitively transmitted by 
the transmitter and is adapted to the particular user after 
receipt by supply of user-specific information generated 
or stored by the decoder. In this way, the memory 
requirements of the decoder are substantially mini- 
mized, while extensive flexibility in the choice of mes- 
sages to be transmitted is provided. 

7 Claims, 10 Drawing Sheets 
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then add this closed-captioned textual material directly 

COMMUNICATION OF INDIVIDUAL MESSAGES to the video screen, so that it can be seen by the hearing 

TO SUBSCRIBERS IN A SUBSCRIPTION impaired. Again, however, this material is transmitted 

TELEVISION SYSTEM system-wide, and there is no provision made for trans- 

5 mission of individual messages to individual subscribers. 

This application is a continuation-in-part of U.S. ap- . Those skilled in the art will recognize that there are a 

plication Ser. No. 653,061, filed Sept 21, 1984 in the number of constraints on the operation of any successful 

name of Keith Lucas and entitled: "Information Display subscription television system. For example, there must 

Scheme for Subscribers of a Subscription Television be an extremely reliable and trustworthy method of 

System". 10 computing charges to be billed to the subscriber and for 

FIELD OF THE INVENTION communication of credit status updates. It is also desir- 
able that the subscriber be permitted to prepay for cer- 

This application relates to improvements in subscrip- xain classes of service, for example, to have access to a 

tion television systems. More particularly, the invention particular broadcaster's offerings. On the other hand, it 

relates to apparatus and methods for communicating 15 ^ ^ desirable that an "impulse" purchase system be 

individually addressable text messages from a central provided such that the viewer could purchase a particu- 

location to individual subscribers of a subscription tele- ^ program on a "pay-per-view" basis when desired, 

vision system. Similarly, it is desired that a running list of programs 

BACKGROUND OF THE INVENTION , 0 purchased by the subscriber be available, such that he 

\ ^ .... . can confirm that he is indeed being billed correctly. It is 

* The sopmstication of conimumcations systems in- furthermore desired that means be provided for secur- 

volvmgsubscr*^ . ^ m ^ • whicn includes 

The systems bemg installed at this time have gready ^ of of ina pp ropr i at e subject 

improved commumcations flexibihty as compared to mM ^ md hase of ^.bearing material by persons 

those previously in use, whUe the quality of the trans- 25 authori ^ d t0 do sa 

nutted signal is continually bemg unproved, as is flexi- . f . c . Hie , „ , 0 _ oK . 
bility in tie business arrangements possible between the , ™ e re <^ eme ^ the * status be updateable 
s^scriber and the broadcaster. that ™™' aUon * possible m both 
For example, in U.S. Pat No. 4,484,217 to Block et ^ ec * ons * etw « n K the d £?^ «> ** ^ m !f r : 
aL, there is disclosed a subscription television system in 30 However, it would be ^efficient to provide individual 
which all billing calculations are carried out at the de- u f lmk trammission facilities at^ch decoder, for exam- 
coder, that is, at the individual subscriber's location. m a sateUlte ™ system. Therefore, it is desirable 
When a subscriber makes a payment, e.g., by simply ^ a two-way commumcations facility be provided 
mailing a check to the broadcaster, the broadcaster then connecting each decoder with the transmitter but in 
sends a message which is detected by that particular 35 wm( r h the two data links are not made using the same 
decoder and used by it to update the user's credit and- medium. Therefore, the communication facility which 
/or account balance information. The decoder then carries subscription television signals from the transmit- 
controls whether the user is to have access to a particu- ter t0 the decoder is not the same as that used to carry 
lar program or not in accordance with this billing infor- payment status information, queries or the like from the 
mation, possibly also in accordance with other sorts of 40 decoder to the transmitter. 

access controls transmitted by the broadcaster. For M indicated above, the prior art suggests that uidi- 

example, each program transmitted may include an vtdual decoders can be addressed for transmission of 

indication that it belongs to a particular "tier" or class billin S information. It would also be desirable if individ- 

of programs. The decoder then permits access to the ^ useT messages could be transmitted to individual 

program if programs of that tier had previously been 45 such as t0 provide an additional communications 

authorized. facility not previously made available. If this is to be 

The Block et al. patent also discloses that teletext done, there are several criteria which must be met. 

data, that is, textual information relating to stock market Paramount among these is security; preservation of the 

reports and the like, could also be transmitted using this secrecy of the message and its availability only to the 

system. However, the teletext data discussed in the 50 particular addressee is of utmost importance. At the 

Block et al. patent appears to be system-wide data, that same time, it is desired to be able to address messages to 

is, data relevant to all subscribers of the system more or classes of subscribers, for example, to transmit civic 

less equally.- The Block et al. patent does not teach any data or the like. 

way in which, for example, an individual broadcaster Another complexity in providing a secure subscrip- 
may send a chosen subscriber a personal message other 55 tion television system is the fact that the decoder cannot 
than billing update data, as above. be considered to be in "friendly hands." That is, unlike 
"Specification of Standards for Broadcast Teletext an encrypted data channel as used by financial instiru- 
Signals," a document published by the British Broad- tions or in military applications, in which both transmit- 
casting Corporation et al. in September, 1976, describes ter and receiver are in friendly hands, an additional 
the teletext broadcasting system in effect in the United 60 security exposure which must be faced in connection 
Kingdom. According to this system, teletext informa- with a television system is analysis of the transmitted 
tion such as closed-captioned programming is available signal. In a subscription television system, the transmit- 
ter the hearing-impaired. According to this system, as ted signal must, of course, be protected, as a very im- 
understood by the applicants, the subscriber simply portant threat is posed by viewers who have purchased 
depresses a button on a key pad comprised by the de- 65 a decoder and attempted to modify it to bypass the 
coder, and the decoder then selects alphanumeric data security mechanisms the billing arrangements or the 
which is transmitted during the vertical blanking inter- like. A further problem is posed by those who would 
val of the standard television signal. The decoder can make copies of, for example, television movies using 
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videotape recorders or the like for subsequent viewing 
or resale. 

It is, therefore, desirable that a system be provided 
which provides a very high level of security, both as to 
the transmitted signal and as to the operation of the 5 
decoder, and one in which some sort of "fingerprint" 
identifying the source of an unauthorized copy can be 
provided. 



SUMMARY OF THE INVENTION 



10 



It is therefore an object of the invention to provide a 
subscriber television system in which individual text 
messages may be directed to individual subscribers. 

It is a further object of the invention to provide a 
subscription television system in which individual text 15 
messages can be transmitted to individual subscribers, in 
which the message can only be received by the proper 
receiver and in which the text is very heavily protected 
against improper receipt, that is encrypted, such that it 
can only be received and decrypted at the correct de- 20 
codgL thus providing an additional level of security to 
LtEe message handling system. 
f It is a further object of the invention to provide a 
subscription television system in which an individual 
message can be sent to an individual user, but in which 25 
the individual decoder is enabled to receive and decrypt 
the specified message only upon activation by the 
L proper individual. 

It is a further object of the present invention to pro- 
vide a subscription television system in which all billing 30 
information is generated at the decoder. The transmitter 
can transmit indication of receipt of payment and of 
additional charges not originating at the decoder to the 
decoder, such as sign-up fees. The decoder is thus en- 
abled to generate the bill. Ultimately, the handling of 35 
billing operations is greatly simplified and paperless 
billing is made possible. 

It is a further object of the present invention to pro- 
vide a television subscription system in which a wide 
variety of teletext messages having specified formats are 40 
available for use by the decoder, in which the formats 
can be varied at the transmitter's option, yet in which 
the memory required at the decoder location is mini-, 
mized, to realize economy of construction of the de- 
coder unit. 45 

A further object of the invention is to provide a sub- 
scription television system in which the identity of a 
particular decoder used to decrypt a program can be * 
determined from recordings made using such a decoder. 

A further object of the invention is to provide a sub- 50 
scription television system in which individual text 
messages can be received by individual subscribers in 
response to queries by the subscriber, in response to the 
desire of the broadcaster, or upon initiation by the de- 
coder itself. 55 

The above needs of the art and objects of the inven- 
tion are met by the present invention, which comprises 
a system and method for communication of individual 
text messages to individual subscribers of a subscription 
television system. According to the invention, a number 60 
of distinct "lines" of information are transmitted during 
each vertical blanking interval of the video signal. A 
number of these lines are referred to as "addressed 
packets," while another group of lines includes teletext 
information. The addressed packets include identifica- 65 
tion of individual subscribers which are transmitted in 
clear text (that is, are not encrypted) such that the indi- 
vidual decoders recognize their own numbers. The 



addressed packets include certain cipher information, 
used in decrypting other portions of the information 
contained in the vertical blanking interval and the video 
signal. The addressed packet also indicates that a partic- 
ular "page" of teletext information is being transmitted 
which is directed to a particular subscriber. The de- 
coder, having detected existence of a message addressed 
to it responsive to the information contained in the 
addressed packet, then selects subsequently transmitted 
teletext "lines" included in subsequent vertical blanking 
intervals, and uses these to assemble a teletext "mes- 
sage" which can then be displayed on the user's televi- 
sion screen. 

In a preferred embodiment, the broadcaster continu- 
ally sends teletext information which is useful in subse- 
quently assembling messages. The teletext information 
repetitively transmitted includes "templates." For . ex- 
ample, should the subscriber seek to ascertain his billing 
status, he will so indicate by pressing a button or burtons 
on a user key pad comprised by his decoder. A micro- 
processor comprised in the decoder will note this re- 
quest and determine the number of a template suitable 
for displaying this information. When that page of text 
is subsequently transmitted, as part of the regular se- 
quence of teletext messages, the microprocessor selects 
it, and then completes the template by filling in various 
dollar amounts and the like unique to the particular 
subscriber. This completes assembly of the billing re- 
port requested. The microprocessor then can display 
the complete billing report. In this way, the teletext 
information comprised in the template, that is, the infor- 
mation needed for the text message which is not user 
specific, such as column headings, current dates, the 
broadcaster's name and address, which is common to all 
subscribers, need not be stored at the user location. This 
greatly reduces the amount of memory which must be 
provided for each decoder. In the same way, the tem- 
plates can be varied by the broadcaster, e.g., to update 
the listing of services made available or the like. 

The microprocessor itself can also generate various 
reports, for example, to indicate to the subscriber that 
his credit is running low. The microprocessor can select 
a template page from the sequence of template pages 
continually being sent by the broadcaster and can com- 
plete it with user-specific billing information, all as 
generally discussed above. 

In this way, it will be observed that there are three 
different ways of providing a teletext message, that is, 
user-initiated, broadcaster-initiated, and decoder- 
initiated. 

Finally, the system of the invention includes means 
for "fingerprinting" copies of program material made 
by a subscriber in derogation of the rights of the copy- 
right proprietor. The address packet includes a flag 
which may be set to cause the decoder to add the de- 
coder identification number to one particular video 
frame of the film being shown. The addition of the user 
identification is generally imperceptible to the user, but 
will show up on any copies of the film that are being 
made. Should the broadcaster thereafter locate such an 
unauthorized copy, he can read the user's identification 
and thereafter cut off service to that individual or take 
other appropriate action. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The invention will be better understood if reference is 
made to the accompanying drawings, in which: / 
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FIG. 1 shows an overall view of a communication 
system according to the invention; 

FIG. 2 shows an overall view of the video format 
according to the invention, and explains certain nomen- 
clature used for understanding the system of the inven- 
tion; 

FIG. 3 shows in broad outline the format of the hori- 
zontal blanking interval; 

FIG. 4 shows additional details of the format of the 
horizontal blanking interval; 

FIG. 5 shows an overview of the material carried in 
the 16 lines of the vertical blanking interval in a 525 line 
embodiment of the invention; 

FIG. 6 shows in some additional detail the clock 
recovery data carried in line 1 of the vertical blanking 
interval; 

FIG. 7 shows in additional detail the framing recov- 
ery data carried in line 2 of the vertical blanking inter- 
val; 

FIG. 8 shows the arrangement of the system data 
carried in line 3 of the vertical blanking interval; 

FIG. 9 shows the general arrangement and contents 
of four different types of addressed packets which can 
be transmitted in lines 4-8 of the vertical blanking inter- 
val; 

FIG. 10 shows the outline of a teletext header line 
which can be transmitted in any one of lines 9-13 of the 
vertical blanking interval; 

FIG. 11 shows a text line, that is a line of teletext 
which may be transmitted during any one of lines 9-13 
of the vertical blanking interval; 

FIG. 12 shows schematically the text processing 
steps performed according to the system of the inven- 
tion, when it is desired that a particular message be 35 
transmitted to an individual subscriber, 

FIG. 13 shows in schematic form the hardware of the 
decoder significant to understanding the present inven- 
tion; 

FIG. 14 shows in schematic form the handling of the 40 
keys and message processing steps performed, and fur- 
ther details how and where these steps are performed in 
the decoder according to the invention; and 

FIG. 15 shows in schematic view the data decryption 
arrangement employed. 45 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

As mentioned above, it is an important object of the 
present invention to provide a communications system 50 
in which individual text messages can be transmitted to 
individual subscribers in a subscription television sys- 
tem. This is to be accomplished without adding unduly 
to the complexity of the system or its cost, and without 
requiring any sort of uplink communication between 55 
the decoder and the transmitter. Moreover, the system 
is to be provided with unprecedented flexibility in 
choice of program by both the broadcaster and the 
dealer, and the subscriber billing is to be substantially 
r automated and performed at the decoder. Finally, the 60 
whole system is to be menudriven, that is, the subscriber 
is to be directed in operation of the system by messages 
displayed on his television screen. 

These objects of the invention are achieved by the 
present system, which is described in the following text, 65 
of which the following is a Table of Contents, and in 
which reference is made to the accompanying draw- 
ings. 



A. System Overview 

FIG. 1 shows in highly schematic form a communica- 
tion system suitable for achieving the objects of the 
invention listed above. At a first transmitter location, 
indicated generally by the numeral 10, the teletext mes- * 
sage sequence is first assembled as indicated at 12. This 
may include standard items such as templates, that is, 
data which provides a format within which user- 
specific information can be added by a decoder to per- 
sonalize a message; personal messages directed to indi- 
vidual users; billing status updates, that is, billing infor- 
mation generated in response to a telephone call or 
letter from the subscriber to the broadcaster; and broad- 
cast messages, that is, messages which are out of the 
ordinary course of business, but which are transmitted 
to substantially all or a predetermined subcategory of 
subscribers (e.g., that there is some general danger of 
which all should be aware). 

At 14, the teletext information from item 12 is assem- 
bled together with video information, and in a preferred 
embodiment of the system of the invention, with multi- 
channel audio. As will be detailed below in connection 
with FIGS. 3 and 4, six channels of digital audio are 
provided in the system of the invention. These are trans- 
mitted during the horizontal blanking interval and may 
be provided on a pay-per-listen basis, whereby the 
broadcaster can generate additional revenue from audio 
transmission. 

At 16, the assembled teletext, video and audio signal . 
is encrypted and/or scrambled. The encryption is done m enCrvj p+^i 
according to a relatively sophisticated procedure which 
is discussed below in connection with FIG. 15. Suffice J 
it to say at this point that the signal transmitted includes 
what are referred to as addressed packets, which among 
other functions alert an individual subscriber's decoder 
that a message has been sent to it, and teletext informa- 
tion. The subscriber identification portion of the ad- 
dressed packet is transmitted in clear text, that is, is not 
encrypted, so that it can be detected without decryp- 
tion. The addressed packet further contains certain 
cipher key information used in decrypting system con- 
trol data. The system control data in turn includes ci- 
pher information required for decryption of encrypted ^ 
user messages. Thus, a double level of security is pro- 
vided, as only the individual decoder can even receive 
the encrypted message, and only that decoder can use 
the system data which it must also receive to decode the 
individual message, which is subsequently sent. The 
composite, encrypted signal is transmitted as indicated 
at 18. It may travel via a satellite 20, by a landline or a 
combination of both to receiving antenna 22. It is there 
passed to a decoder which comprises means for detect- 
ing the signal, decrypting the encrypted portions of it, 
completing any messages requiring any subscriber- 
specific data, such as billing status information and the 
like, and display of the received messages. Of course, 
the decoder also permits user selection of the decrypted 
audio and video information, and includes means for 
maintaining the billing history information related to a 
specific user, for restricting access of individuals to the 
video signal, prevention of impulse purchase of pro- 
grams by those not authorized to do so, and so on, all as 
detailed below. 

The system of the invention is completed by means 
permitting the user to communicate with the broad- 
caster. Ordinarily, the user will only need to communi- 
cate with the broadcaster sporadically, for example, to 



viewer 
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request addition of a service, or to pay a bill or the like. 
Conventional communications facilities such as the 
telephone system or the mails are suited for this func- 
tion, as indicated schematically at 8. In this way, no 
uplink facility at the user's station need be provided. 5 

1. The Communications Format Employed 

FIG. 2 shows the overall transmission format of the 
system according to the invention. As is conventional in 
television, 30 "frames" each comprising a still image are 10 
transmitted per second as indicated. Each frame in- 
cludes two "fields," as also shown. In a preferred em- 
bodiment of the invention, the video encoding scheme 
employed is that referred to generally as "B-MAC" 
This is an acronym for type B format, Multiplexed Ana- 15 
log Component system. 4 Type B" refers to the fact that 
data is carried integral to the video signal. See generally 
Lowry, "B-MAC: An Optimum Format for Satellite 
Television Transmission," SMPTE Journal, November 
1984, pp. 1034-1043, which discusses in detail the 20 
B-MAC format and explains why it was chosen over 
various competing systems. 

According to the present invention, the vertical 
blanking interval (VBI) of each field contains certain 
"system data" necessary for operation of a subscription 25 
television system according to the invention, as well as 
addressed packets and teletext lines used to carry data 
needed for the operation of individual decoders and for 
transmission of messages to individual subscribers. In 
the preferred embodiment of the present invention, the 30 
vertical blanking intervals of 16 total fields are used for 
complete transmission of all system data required, 
which includes an encryption key which is changed 
every 16 fields, that is, on the order of three times per 
second. As also shown in FIG. 2, each line also includes 35 
a horizontal blanking interval (HBI). During the HBI 
are transmitted six channels of high quality digitally- 
encoded audio information, with error correction, such 
that the decoder can also be used to supply a high qual- 
ity audio signal. This can be used to provide the audio 40 
component of the corresponding video signal (or sev- 
eral versions thereof, in different languages) or an addi- 
tional audio signal, such that subscription audio is also 
made available according to the system of the inven- 
tion. 45 

2. The Horizontal Blankinq Interval 

FIG. 3 shows the format of the horizontal blanking 
interval (HBI). In the preferred embodiment, the HBI 
consists of 78 total bits of four-level frequency-shift- 50 
keyed (FSK) data. The HBI is interposed between ver- 
tical blanking interval or video information from a pre- 
vious line and that of the present line. A typical horizon- 
tal blanking interval as shown begins with a two-bit 
guard band 30, followed by 45 bits of audio and utility 55 
data 32, a second two-bit guard band 34, twenty bits of 
color burst information 36, a further guard band 38, six 
more bits of data 40 and a final guard band 42, after 
which the VBI or the video signal of the particular 
frame commences. The position of the color burst 30 60 
within the HBI varies, to provide signal scrambling; 
descrambling involves the use of a repetitively-transmit- 
ted key, described below in connection with FIG. 8. 
(The actual number of bits of data in each HBI can also 
be varied pseudo-randomly, for further security; the 65 
average number is fifty-one.) 

FIG. 4 shows some additional details of the horizon- 
tal blanking interval data 32 and 40 shown in FIG. 3. In 
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the example shown, fifty-one total bits of data are pro- 
vided in each line of the HBI, and each bit is four-level 
FSK encoded, such that each bit period includes trans- 
mission of two bits. One bit can be referred to as sign 
and the other as magnitude as indicated on FIG. 4. As 
shown, the first seventy-eight bits are digital audio; thus 
each frame provides a thirteen-bit digital representation 
of a sample of each of six audio channels. High quality 
transmission of audio frequencies up to approximately 
15 kHz is thus provided. Following the audio informa- 
tion are six bits of stepsize and bandwidth information. 
The stepsize bits indicate the size of the steps numbered 
by the thirteen bits of information preceding, and the 
bandwidth information relates to the amount of the 
amount of emphasis or de-emphasis of the signal em- 
ployed. Alternate fields carry the stepsize and band- 
width data. Both these terms are used as conventional in 
the Dolby delta modulation scheme, which is employed 
in the preferred embodiment of this invention for trans- 
mission of the audio. Following are twelve bits of error 
correction code (ECC) for correction of the audio, 
indicated at 48. Four utility bits follow at 50, and the 
last bit 52 of the data are a parity check bits for checking 
the parity of the error correction bits 48. 

Additional details concerning the horizontal blanking 
interval format can be found in co-pending Ser. No. 
883,310, filed July 8, 1986, incorporated herein by refer- 
ence. 

3. Vertical Blanking Interval 

FIG. 5 shows the arrangement of the lines which 
make up the vertical blanking interval (VBI). The VBI 
includes 16 lines in the 525-line NTSC version of this 
invention. A slightly different number of lines are used 
in the 625-line PAL embodiment of this invention. 

The functions of the lines and their arrangement in 
other respects are identical. Discussion of a specific 
number of lines herein therefore should not be taken to 
limit the invention, except as specifically required. 

As indicated, the vertical blanking interval is 377 bits 
wide. These bits are two level FSK encoded as com- 
pared to the four level FSK scheme used in the HBI as 
discussed above. Lines 1, 2 and 3 include the transmis- 
sion of clock recovery, synchronization and system 
service data, as indicated in FIG. 5. The detailed for- 
mats of these lines and the use of the information con- 
tained therein is discussed in co-pending application 
Ser. No. 704,024, filed Feb. 21, 1985, incorporated by 
reference herein, and in Ser. No. 883,310, filed July 8, 
1986. Their functions are discussed briefly below in 
connection with FIGS. 6-8. 

For the purposes of the present invention, the sig* 
nificanant data contained in lines 1-3 is a system key 
which is updated every sixteen frames, that is, which 
changes with each complete system data transmission as 
indicated above in connection with FIG. 2. The system 
key is common to all decoders. The system key is con- 
tained in the service data of line 3, and is used for de- 
cryption of video program material, audio and teletext 
together with additional less frequently transmitted, but 
individually varied cipher data, as well as invariant 
individual decryption ciphers. This arrangement pro- 
vides substantial system security. Operation of this sys- 
tem is described further below. 

Lines 4-8 of the VBI include the addressed packets, 
as indicated by reference numeral 62. As noted, these 
each contain an address which is then followed by data, 
concluding with error correction coding (ECC). The 
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addresses are those of the individual decoders. The tions referred to above, to ensure correct reception of 

addresses in the address packets are transmitted in clear the service key, as well as the other system data, 

text, such that they can be received without decryption As indicated in co-pending application Ser. No. 

by the receiver. The remainder of the message is en- 736,305, filed May 21, 1985, the key contained in line 3 

crypted. In this way, addressed packet data, which is 5 is also used to unscramble the location of the color burst 

very significant to the proper functioning of the system signal occurring during the HBI, which varies from the 

because one of the addressed packets includes one of the exemplary position shown in FIG. 3. This additional 

decrypting ciphers needed, is provided with a high scrambling provides a further measure of security to the 

degree of security. Addressed packets addressed to system according to the invention, 

differing decoders may be transmitted ina ^single field. "> B. Transmission of Subscriber Messaqes 

As indicated at 64, lines 9-13 of the VBI are used to 
transmit teletext. The first part of each teletext line is a It will be appreciated by those skilled in the are that 
teletext identification which indicates that the line in ^ communications system of the invention requires 
fact is teletext As shown, two types of teletext lines are certain data t0 be transmitted system-wide, that is, that 
used. Teletext headers include a relatively larger num- 15 311 the decoders must receive certain information, while 
ber of flags, and indicate which of the following teletext °* er mfonnatton should be transmitted only to mdivid- 
lines are part of a particular "page" or message. The ^ addressable decoders. Furthermore, it win be 
text lines themselves include a somewhat lesser number appreciated that some data, such as data identifying the 
of flags and text data; typically forty ASCII-encoded ^ program material currently bemg transrmtted or con- 
bytes are sent per text line, and up to twenty lines can be 20 ch W cl P hers ' need f » b ^ rM ff tte ^ epe l ' 
displayed on L user's screen at once. Finally, lines 14 ov ?' over whlle other ^ ta need onl * 
and 15 indicated at 66 are not used in the presently * f—ttod infrequently or upon a single occurrence 
preferred embodiment of the invention. . Accord "JS t0 °™ important aspect of the present 
prcicKcu wuwuuucui ui uic ui ™»^"- invention, data which must be transmitted system-wide 

As mentioned briefly above, FIG 6 shows in addi- %$ repetitive i y is transmitted as part of the system 
ttonal detail the clock recovery data of line 1 of *e . £ ^ dm tQ mdiv y idual 
VBI. As mdicated itefirstpomon 68 is the seventy- dQCQdm of of deC oders or infrequently is trans- 
eight symbols of the HBI. Thereafter, line 1 includes a M ^ ^ addressed ke ^ appeari ng in 
series of l's and 0's which are used to synchronize the line$ ^ £ mentioned above? ^ different versions 
clock of the decoder, as discussed m the co-pendmg 3Q of ^ ^ whicfl tQgether mclude ^ system data> m 

applications referred to above. transmitted during the "cryptocycle" which is com- 
FIG. 7 shows lme 2 which is used for framing recov- p , eted every skteen frameSj ^ approximately every 
ery, that is, for synchronization of the video signal. one . t hird second. The system data may include a "fin- 
Again, the first portion 70 is the seventy-eight symbols g e rprint" bit When detected, this bit causes the user 
of the HBI data; this is followed by frammg recovery 35 iden tification number to be copied to the display for a 
data, which consists of two repetitively transmitted single framC( such ^ my reproduction made of the 
eight bit sequences. One is the inverse of the other; the program being transmitted at that time will include the 
change from one to the other is made at the point y^tt identification. This enables tracking down of the 
marked "phase reversal." As described in the co-pend- Q f illegal copies. Other system data includes a 
ing applications referred to above, this line is used for 40 service key required for decrypting the video signal; 
framing recovery, i.e., for correct synchronization of ^ service key is changed every sixteen fields which 
the received video signal. makes it difficult to obtain illegally. 

FIG. 8 shows in some additional detail the makeup of other information repetitively transmitted as part of 
line 3; again, it begins with the seventy-eight symbols of t h e system data includes the program tier number, that 
HBI data indicated at 72, followed with a bit which is 45 ^ an indication of the tier to which the program being 
not used, and a number of message bits, each of which transmitted on a particular channel at that time belongs, 
is immediately followed by a parity bit As discussed The tier concept is used to separate various classes of 
more fully in co-pending application Ser. No. 883,3 10, programming transmitted by the transmitter. The user 
filed July 8, 1986, the message bits shown in line 3 of then selects which tiers of programs he chooses to 
FIG. 8 are each repeated three times and are each pro- 50 watch, e.g., sports programs, special features, premium 
tected by parity bits, such that of some 378 total bits, movies, and the like. The user indicates which tiers he 
only sixty-two bits of useful data are provided. This wished to view to the broadcaster, e.g., by telephone or 
data comprises the "system data" used by the subscrip- by letter, and the broadcaster transmits indication of the 
tion television system of the invention to keep control tiers selected by the user to the user's decoder individu- 
of a wide variety of system functions. Three different 55 ally as part of an addressed packet The individual de - 
versions of line 3 are required to transmit all the system coders use the tier number transmitted as part of the 
data needed, and each is transmitted in five successive system data to either en able or disable the viewing o f a 
fields, such that the total system data transmission con- particular program at a particular time. Ilie distinction 
sumes fifteen total field transmissions. A sixteenth field between system data ana addressed packet data is thus 
is not used for transmission of system data. Most perti- 60 illustrated: The program tier number relates to the par- 
nent to the present invention is the fact that the system ticular program being transmitted by the broadcaster at 
data transmitted in line 3 includes a service key which is a given time and thus clearly should be transmitted to 
changed every 16 frames, i.e., on the order of three all decoders. On the other hand, the primary and sec- 
times per second. This service key must, of course, be ondary program tiers, which terms refer to the tiers 
accurately received for the decoder to work properly. 65 selected by and paid for by the subscriber, are transmit- 
Therefore, it is transmitted redundantly, as outlined, ted individually as part of the addressed packets, thus 
and in combination with extensive parity-based error enabling the decoder to determine which programs it 
correction, all as discussed in the co-pending applica- should allow the viewer to see. 
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As described above, a primary aspect of the invention 
described and claimed in the present application is the 
transmission of individually adressable, encrypted mes- 
sages from a transmitter to an individual decoder for 
display to the subscriber. As has been described previ- 5 
ously, this is done by using an addressed packet to indi- 
cate to an individual decoder that a personal message 
for the subscriber is to be found in a forthcoming frame. 
The individual decoder is thus alerted to select that 
teletext message when it is subsequently transmitted. 10 

1. The Addressed Packets 

FIG. 9 shows four types of addressed packets which 
are made available in a presently preferred embodiment 
of the invention. Their formats, and the various items of 15 
information shown on FIG. 9 as being transmitted by 
each can, of course, vary as needed, depending on the 
specific requirements of communication between the 
transmitter and individual decoders. Therefore, these 
particular addressed packets should not be considered 20 
exclusive or as a limitation on the proper scope of this 
invention. 

The 377 bits of each of the addressed packets are 
encoded such that they can decoded by a one-half rate 
forward error correcting code. This reduces the num- 25 
ber of useful bits to 188, which is the total appearing in 
each of the several possible addressed packets shown in 
FIG. 9. In each case, the first twenty-eight bits, indi- 
cated generally at 74, are the subscriber or user address 
which is transmitted in clear text, that is, is not en- 30 
crypted. This acts as a label for recognition by the tar- 
get decoder. The twenty-eight bit user address allows a 
maximum of 268,000,000 decoders to be addressed by 
an individual broadcaster. A non-encrypted two-bit 
consortium identification 76 is also provided in each of 35 
the addressed packets. This identifies a broadcaster or a 
group of broadcasters. The remainder of the addressed 
packet is encrypted, as indicated. This includes 138 bits 
of various keys, credit updates and program tiers which 
the subscriber's decoder is authorized to access, and 40 
twenty bits of cyclic redundancy check data for error 
detection and correction of the 138 bits just described. 
Four of the encrypted bits, possibly in conjunction with 
the consortium identification bits, identify the addressed 
packet format of a particular line. 45 

The data transmitted in the addressed packet can 
vary quite widely, as indicated generally in FIG. 9, and 
as further detailed in Sen No. 883,310, filed July 8, 1986. 
For example, in a first addressed packet 78, the "mes- 
sage portion" 79 of the addressed packet may include 50 
credit update information, may identify the primary 
program tiers, that is, the classes of programming for 
which the subscriber has paid and therefore is entitled 
to view, other billing data, and importantly the key-of- 
the-month (KOM). The KOM is critical to the decryp- 55 
tion of program data, as will be described below. In 
essence, this is a lengthy sequence of bits which is used 
in connection with particular decryption hardware de- 
scribed below in connection with FIG. 15. The KOM is 
varied once per month, and is used together with a 60 
secret serial number which is permanently written into 
memory comprised by the decoder assembly. The key- 
of-the-month is the same for all decoders, but is individ- 
ually transmitted to each. This allows deauthorization 
of individual decoders as needed by the broadcaster. 65 
The key-of-the-month is used together with the secret 
serial number of each of the individual decoders to 
provide a decryption key which is unique for each de- 



coder. As will be appreciated by those skilled in the an, 
this provides a very high level of security to the system. 
It also requires that the key-of-the-month be reliably 
detected by the decoder. 

In order to accomplish this goal, the primary ad- 
dressed packet 78 is transmitted on a regular basis 
throughout the month, e.g., on the order of once every 
hour or so. In the preferred embodiment of the decoder 
of the invention, the "intelligent" portion of the system 
is always enabled, whether or not the subscriber is actu- 
ally watching his television at the time, such that the 
key-of-the-month is reliably received, even if the sub- 
scriber rarely watches television. The key-of-the-month 
for a subsequent month can also be transmitted so as to 
be received in advance of the first day of the month so 
that no service interruption is likely to occur; a key-of- 
the-month odd/even bit transmitted as part of the sys- 
tem data is used to indicate which is to be used to de- 
crypt particular program material. 

Other aspects and uses of the primary addressed 
packet 78 will appear as the discussion of the invention, 
proceeds. 

A second addressed packet format is shown at 80. 
This addressed packet is transmitted regularly only if 
the consortium wishes to make use of more than than 
forty program tiers which can be separately identified 
within the primary addressed packet 78. If it is used, it 
may also include credit update information and other 
billing data as indicated, as well as the secondary pro- 
gram tier information shown. 

Other addressed packets are shown at 82 and 84. 
These may contain a variety of data as indicated. For 
example, a third format shown at 82 may include per- 
sonal message page numbers and system housekeeping 
data. The personal message page numbers are used by 
the decoder to select appropriate teletext lines from 
subsequently broadcast frames. The fourth addressed 
packet format shown at 84 is a memory patch address 
packet, which is used to modify the memory contents of 
a particular decoder, for example, in the event of a 
change of address or to correct certain fault conditions. 

2. Teletext Communication 
a. Features 

There are a number of important objectives of the 
of the invention which have a communications sys- 
tem direct impact on the design of the teletext commu- 
nication format employed. One of the most significant 
features is the fact that teletext messages to be displayed 
are to be selectable in several ways to provide flexibility 
to the system. For example, it was deemed highly desir- 
able that the system be "menu-driven," that is, that the 
user be provided with screens showing pages, diagnos- 
tic messages, programming schedules and the like, and 
that he be able to readily move through them at his own 
option. In order that the decoder can be economically 
manufactured, the large quantity of data required to 
provide the many screens required cannot be stored at 
the decoder. Therefore, as much of the data as possible 
is stored at the transmitter location. On the other hand, 
because it is highly undesirable that a continuous uplink 
or landline connection be provided between the de- 
coder and the transmitter, i.e., to allow the decoder to 
cause the transmitter to send particular data needed, all 
this information has to be made available to the decoder 
on a regular basis, such that it can select the data it 
needs to construct the various personal messages, menu 
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pages, billing status pages and the like which are de- 
sired. Therefore, the teletext messages, at least as insofar 
as they are identical for all subscribers, are transmitted 
repetitively, and the decoders are enabled to select 
those which they require, for example, in order to re- 5 
spond to the user's commands as input from a key pad. 

It is also important that the decoder itself be able to 
initiate messages. Because the decoder performs the 
billing function and retains all information relating to 
the current billing status of the subscriber, the decoder 10 
must be able to construct a screen message to display 
this information to the subscriber as needed. As above, 
it was considered undesirable to store all the informa- 
tion needed to generate a text screen at the decoder, as 
this would have been prohibitively costly of memory. 15 
Instead, only the user-specific data is stored at the de- 
coder; the decoder selects the proper template for dis- 
play of billing information from those regularly trans* 
mitted as teletext pages, and completes it by insertion of 
the user-specific information. 20 

Finally, it is important that the system itself be able to 
urge a teletext message upon the decoder and hence on 
the viewer, for indication of emergency conditions, for 
announcing changes in service, and for providing per- 
sonal messages to the subscriber, among other reasons. 25 

In a particularly preferred embodiment, such broad- 
caster-initiated messages can be "forced," that is, so that 
they are displayed immediately upon actuation of the 
user's television, or can be **unforced", such that the 
user is provided with an indication that a message is 30 
waiting, but is not obliged to view it immediately. 

b. Summary 

These diverse uses and objectives of teletext commu- 
nication are achieved by the present invention, accord- 35 
ing to which teletext is transmitted in a bipartite format. 
Teletext according to the present invention is transmit- 
ted in the form of a number of text lines or rows, making 
up a page of text. The rows making up the page are 
preceded in transmission by a teletext header. The 40 
header indicates the fact that a teletext page follows and 
indicates its page number. A decoder looking for a 
particular page number, for example, a template page, 
scans the teletext page numbers provided in the teletext 
headers for the particular page of interest When the 45 
page number sought is detected, the decoder then se- 
lects the following page, that is, selects for storage all 
the teletext lines which follow until the next teletext 
header line is identified. 

c. Line Formats 50 

FIGS. 10 and 11 show respectively the formats of the 
teletext header and text lines. In FIG. 10, the teletext 
header 90 is shown as comprising a thirty-two bit tele- 
text identifier 92. This field simply indicates that this 55 
particular line of the vertical blanking interval is a tele- 
text line, as opposed to, for example, an addressed 
packet The next thirty-two bit area 94 contains various 
control flags, which are discussed in detail below. The 
teletext header then contains a 128 bit field 96 which 60 
identifies the number of the page which is comprised by 
the following text lines. In the preferred embodiment, 
the page number is a sixteen bit number, each bit of 
which is encoded as a eight bit byte. The flags 94 are 
similarly encoded; that is, a flag which is either a " 1" or 65 
a **0" data value is nevertheless encoded as an eight bit 
byte for transmission, so as to enable its correct detec- 
tion more probable than if it were simply a single bit 
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flag. For the same reason, the page number is a 128-bit 
word in which each eight bit byte indicates whether the 
corresponding bit is a I or a 0, again for extremely 
reliable detection of page numbers. Finally, the last 165 
bits 98 of the teletext header 90 are not used. 

The flags 94 include a header flag 94a which indicates 
whether the teletext line is a header or is not, a linked 
page flag 94b indicating whether the subsequent page of 
teletext is one of a number "linked" or related to the 
present page, an encrypted page flag 94c indicating 
whether the subsequent page is encrypted or not, and a 
box page flag 94d indicating whether the text shown in 
the subsequent page should be displayed against a video 
background or a black background. 

The significance of the flags is as follows. The header 
flag 94a simply indicates whether a particular teletext 
line is a header or is a line of text. The linked page flag 
94b is used to signify to the decoder that a subsequent 
page contains data needed to complete the message 
begun in the present page. For example, if a teletext 
message is too long to fit into a single page comprising 
twenty 40-character lines of text, the user typically will 
desire to see the subsequent text page. The linked page 
flag 94b is used to alert the decoder to this fact and to 
cause it to copy the page of text having the next higher 
page number into a random access memory, such that if 
the user then indicates that he wishes to see the subse- 
quent page of text, it is already stored in the random 
access memory. In this way, the entire message can be 
displayed more or less immediately, as opposed to wait- 
ing for a subsequent transmission of succeeding pages, 
which may not occur for on the order of several min- 
utes in a very busy system. The linked page flag 94b 
thus provides an opportunity to improve the teletext 
service to the user. More particularly, any number of 
pages can be linked to provide lengthy text messages, 
e.g., stock price quotations or the like, which can effi- 
ciently be read in sequence. 

The encrypted page flag 94c indicates whether the 
text found in the subsequent text lines making up a page 
is encrypted or not In many cases, of course, there is no 
reason to encrypt the teletext, for example, the message 
is not private, or if its loss will not be damaging to the 
system integrity, as would be, for example, the loss of 
control over a first-run motion picture or the like. 
Hence, many teletext lines are not in fact encrypted. 

Finally, the box flag page 94d indicates to the de- 
coder that the teletext in a subsequent page is to be 
superimposed over whatever video is on the screen at 
the time, instead of being displayed against a plain back- 
ground. This flag is useful for several purposes. For 
example, closed-captioned teletext, providing lines of 
dialogue and the like so that the hearing-impaired can 
follow the text of a film, is clearly best provided in this 
way, such that a viewer can simultaneously see the text 
and the video. On the other hand, important system 
messages, such as warnings of community dangers and 
the like, may be more dramatically or effectively pres- 
ented against a plain background. Hence, this option is 
provided and is 

As mentioned, each of the four flags 94 is transmitted 
as an eight bit byte rather than as a single bit flag, to 
render the detection and decoding process more robust 
to reduce overall system errors. As mentioned, the bits 
making up the page number, which identifies the suc- 
ceeding page of text, are similarly encoded, such that a 
sixteen bit page number occupies 128 bits of the teletext 
header. 



3/8/2005, EAST Version: 2.0.1.4 



4,829,569 

15 16 

FIG. 11 shows the structure of an individual text line and the EEPROM 116 is comprised therein. As indi- 

100 up to twenty of which may make up a page of text. cated at 120, the decoder then "grabs" the indicated 

As in the case of the teletext header of FIG. 10, the first page when the teletext header including the appropriate 

thirty-two bits 102 of the text line 100 are a teletext page number is received, by "grabbing" the teletext 

identifier. These are identical whether the teletext line is 5 lines which follow the teletext header thus identified. . 

in fact a header or is a text line. The next eight bits are As shown in FIG. 13, the microprocessor 114 is as- 

a header flag 104, which is identical to the header flag sisted in its operations by a chip referred to as MATS 

comprised by flags 94 of the header line 90, that is, it is 122, these letters being an acronym for Microprocessor 

an eight bit byte indicating that the teletext line is in fact and Teletext Support. In the preferred embodiment of 

a text line 100 and not a teletext header 90. The follow- 10 the invention, MATS 122 receives the page number 

ing 320 bits are devoted to the transmission of forty from the microprocessor 114 and compares all incom- 

bytes of textual data. Typically, these are encoded ac- ing teletext header page numbers with this number, 

cording to the usual ASCII standards, whereby each When MATS 122 detects a coincidence, it then copies 

byte is seven bits of data plus a parity bit for error detec- all succeeding text lines until a further teletext header is 

tion. Thus, each text line transmits forty characters 15 detected, and stores these text lines in a random access 

which may be any alpha-numeric character found in the memory (RAM) 124. It subsequently causes these to be 

ASCII character set The last seventeen bits 108 are not read out and passes them to a character generator 126, 

used. which integrates them with the video signal and dis- 

Thus, in practice, the broadcast transmitter transmits plays these on the subscribers television as indicated at 

a sequence of teletext lines in lines 9-13 of the vertical 20 128. 

blanking interval (see FIG. 5). Up to twenty text lines As bdicated at 130 on FIG. 12, in a preferred em- 
100 may follow each teletext header 90. The teletext bodiment, the step of grabbing independent pages is 
header 90 contains a page number 96 which identifies repeated. This is to ensure that the teletext page lines 
the following text lines as, for example, belonging to a are correctly received. In a particularly preferred em- 
template useful in displaying billing status, or as includ- 25 bodiment of the communications system of the inven- 
ing, for example, information concerning the current tion, all teletext pages are transmitted in duplicate, one 
movie being run, that is, describing its title, its lead header being followed immediately by its correspond- 
characters, its length, and the price the subscriber, will ing text lines and a second identical header, which is 
be charged for viewing it, or the like. It will be appreci- then followed by the same lines of text, so that this 
ated, therefore, that the teletext lines in any given verti- 30 second step of grabbing the communicated page 130 can 
cal blanking interval may be all text lines 100, since only be repeated at once rather than waiting for a subsequent 
five teletext lines can be transmitted in a vertical blank- transmission of the same page, which might take place 
ing interval. (It will be appreciated by those skilled in on the order of seconds later. The idea, of course, is to 
the art that this numerical limitation relates to a 525-line serve the user's convenience. The second copy of the 
NTSC-type signal; the actual numbers of the lines in the 35 page is stored at the same location in RAM 124 as the 
VBI are different in the PAL type 625-line system.) first, such that any blanks in the first copy which were 
, w _ . . caused by parity errors in the teletext data portion 106 
3. Message Origination ^ n) ^ ^ com p leted> on average, by the second 

FIG. 12 indicates in flowchart form the steps taken grabbing of the same information, 

which result in the display of a teletext message on a 40 Should the page grabbed at 120 have been a template 

subscriber's television screen in the system according to page, subscriber-specific information is needed to com- 

the invention. FIG. 13 shows in schematic form the plete the display. For example, if the user requests a 

hardware of the decoder which is used to perform this billing status update, the page grabbed will include such 

function, as well as the ordinary video processing. The things as column headings, and the titles of various data 

following discussion of teletext processing may benefit 45 items forming part of the billing display. For example, it 

from simultaneous consideration of both figures. might list the last 10 programs in a row purchased, total 

As mentioned above, in a preferred embodiment of the prices paid, subtract this from the outstanding bal- 

the invention, a teletext message can be generated in ance at the last credit information request, and display a 

response to a user-initiated request, in response to the new balance. Such information as titles, e.g., "Programs 

decoder detennining that a particular message should 50 Purchased," "Price Paid," and "Credit Balance," will 

be given to the subscriber, or in response to the broad- be transmitted as part of the template. Such user specific 

caster's transmitting a message to the individual sub- data as the numbers of the programs purchased, the 

scribers. FIG. 12 shows how these three forms of initia- prices paid and the user credit information may be 

tion of a message all result in a display thereof. The stored in the electrically erasable programmable read 

user-initiated service path begins on the left side of FIG. 55 only memory 116 (FIG. 13) and can then be used to 

12 at 110. For example, suppose the user wishes to see complete the template page as needed, as indicated at 

on his screen the current program material being trans- 132. The complete ASCII encoded stream of bits is then 

mitted, or wishes to check his billing status. He presses supplied to a character generator 126, as indicated gen- 

the appropriate key or combination of keys of a key erally at 134, which in turn is used at 136 to supply a 

pad, as indicated at 112 of FIG. 13. The decoder com- 60 complete video signal to the display unit 128. 

prises a microprocessor indicated at 114, which accesses FIG. 12 also shows as mentioned the steps taken 

an electrically erasable programmable read- only mem- when the system initiates the display of a message on the 

ory (EEPROM) indicated at 116 to determine which user's television screen and when the decoder initiates 

teletext page number provides the appropriate template such a step. For example, suppose the broadcaster 

for this information, as indicated at 118. In the preferred 65 wishes to send a particular subscriber a personal mes- 

embodiment, the microprocessor 114 is a "secure" mi- sage, or wishes to announce an increase in the price of 

croprocessor, meaning that it cannot be tampered with a service, the availability of a new service, or the like, 

or its software read out or altered without destroying it, At 138, the transmitter causes an addressed packet to be 
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sent indicating that a personal message is available at a messages selected from those sent by the broadcaster; 

particular page number. For example, the addressed the messages sent by the broadcaster are not transmitted . 

packet format shown at 82 of FIG. 9 would typically be responsive to specific requests from the decoder, as in 

sent The MATS 122 in this case would recognize the the case of conventional remotely accessible database 

subscriber's identification number in the addressed 5 management schemes. However, it is believed that such 

packet, and send it to the microprocessor. The micro- "pay-teletext" may nevertheless have utility in cases 

processor will then return the page number to the where the amount of text to be viewed is relatively 

MATS 122 which can thereafter grab the indicated limited. For example, the user might select Wall Street 

page as shown at 120 and process and display the mes- or Chicago Board of Trade quotations, or world-wide - 

sage as above. 10 gold prices from a menu of a wide variety of financial ^-^[5 

As mentioned above, in some cases it is considered information services. "Pay teletext" could also be used"] _£L^p&rS 

desirable that a personal message or broadcast message to provide individuals with access to Rueters, United f fltfWVf^V 

be "forced," that is, immediately displayed upon the Press International, Associated Press and other newsl 

user's next turning on his television set, or superimposed gathering services not generally available to the public. J 

over any programming which he might presently be 15 According to the present invention, such a pay teletext 

viewing. In such a case, a "forced message" bit is set in scheme could be very simply implemented using the 

the addressed packet indicating that a teletext message addressed packet/teletext transmission arrangements 

is being sent to the subscriber. This is detected by the previously discussed. 

microprocessor in decoding the addressed packet and is To conclude the discussion of FIG. 13, the B-MAC 
used to control the display of the teletext accordingly. 20 signal is input at 150. The data contained in the vertical 
In other pases, if this bit is not set, the microprocessor blanking interval (VBI) is passed to MATS 122 as 
may simply alert the subscriber that a personal message shown at 152 for processing as discussed above. The 
has been received, e.g., by lighting a lamp on the con- MATS examines the user number of the addressed 
trol panel; he may then view the message when conve- packets and supplies those bearing the correct number 
nient for him. 25 to the microprocessor. The addressed packet and sys- 
A third method of initiating a message is shown be- tern data are directed as shown at 154 to the micro- 
ginning at 140 of FIG. 12. In this case, the microproces- processor 114 for generation of control signals and 
sor initiates the message. For example, when it detects decryption keys, transmitted at 156 to the MATS, 
that the subscriber's credit level is running relatively Meanwhile, the remaining portions of the vertical 
low, it may alert, him that he should arrange for in- 30 blanking interval data, the teletext material, is processed 
creased credit by sending the broadcaster a payment by MATS 122. In general, the teletext data is stored in 
Thereafter, of course, the broadcaster will transmit an RAM 124 and is subsequently supplied to the character 
addressed packet to the decoder, which is detected by generator 126 after decryption using the encryption 
the microprocessor and used to update the billing re- keys provided at 156 by the microprocessor 114. As 
cords. In this case, a microprocessor selects from a 35 mentioned above, if a particular text header indicates 
ROM 117 the page number of an appropriate template the presence of a linked page, a second page of text will 
for displaying to the user his billing status. ROM 117 be selected by MATS 122 and stored in RAM 124 for 
stores the microprogram run by the microprocessor. supply to the character generator 126 upon request 
The microprogram effectively responds to the user thereof by user input at 112. 

inputs, and provides the various text page numbers 40 FIG. 13 also shows schematically the processing of 
required for response to user requests. The micro- the audio information contained in the horizontal blank- 
processor sends the selected page number to MATS ing interval (HBI). This is sent to an audio descrambling 
122. MATS 122 thereafter compares the page numbers unit 158 which receives a control signal from the micro- 
of all incoming teletext pages until it detects this partic- processor at 160 for controlling access to any pay-audio 
ular page. When it does so, it copies this template into 45 services which may be provided by a broadcaster. 
RAM 124. The page is then completed by insertion of Somewhat similarly, the video signal is sent to a video 
the user-specific information into the template and dis- descrambler 162, which is also supplied by the control 
play at 136. signal from the microprocessor at 164, providing the 
It will be appreciated that there has been described an descrambling information necessary and preventing 
extremely flexible method of providing individually 50 access of the subscriber to programs to which he is not 
addressable teletext messages to a subscriber in a sub- entitled, using the information contained in the ad- 
scription television system. Additional possibilities and dressed packets, all as discussed above. The video signal 
^features can now be discussed as well. For example, the is combined in mixer 166 with the teletext video from 
] user initiated teletext scheme disclosed in connection character generator 126 and supplied to a display unit 
' l US^ J with FIG. 12 at blocks 110 and 118 indicates that the 55 128 as indicated. 
reA\j€$* * I uscr initiate teletext display by pressing a button on As indicated at the caption 154 in FIG. 13, the ad- 
^ I a key pad causing the decoder to then select appropriate dressed packets and system data, separated from the 
^messages from the broadcaster. Another possibility remainder of the vertical blanking interval data by 
would be "pay-teletext" in which the user would select MATS 122, are supplied to microprocessor 114 via 
teletext information as one of his ordinary tiers of pro- 60 RAM 124. This is because, in general, the microproces- 
gramming material. For example, such information sor 114 is much slower than the MATS 122, so that the 
might include financial quotations, electronic bulletin RAM 124 is useful as a data buffer. In the embodiment 
boards, flight information, computer shopping services, of the system of the invention described above, each 
various sorts of information retrieval, and other forms addressed packet is individually addressed and re- 
of information in which the user can select items from a 65 ceived. This places a limitation on the throughput of the 
database using a menu-driven system. Of course, the system, that is, it limits the number of individual packets 
system is limited as compared to an interactive database which can be sent. To alleviate this problem, a "bank 
by the fact that the decoder is only permitted to display addressing" scheme may be employed. In this embodi- 
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ment, the decoders are divided into "banks" and are 
assigned to users having characteristics which make it 
likely that messages may be commonly addressed to 
them, for example, common time-zone residence, com- 
mon language, etc. Each of the decoders in a bank re- 5 
sponds to the same 28-bit user address, that is, each 
receives the same addressed packet Further, each de- 
coder in a bank has written to it at manufacture a six-bit 
member code. A bank-addressed packet includes a num- 
ber of "packet enable" bits, each of which is assigned to 10 
one of the decoders of the bank. Thus, when an ad- 
dressed packet is received, the member code is used to 
determine whether the corresponding packet enable bit 
is set; if so, the other addressed-packet functions de- 
scribed above are enabled. A single data bit can also be IS 
transmitted to each decoder similarly, as part of a sec- 
ond group of bits corresponding to the packet enable 
bits, transmitted in an addressed packet; again, the mem- 
ber code is used to identify the corresponding one of the 
second group of bits. In this way, a single message can 20 
be used to transmit differing single-bit data items to 
differing decoders. 

C. The Decoder Function 

FIG. 14 shows the key elements of the decoder 25 
shown in FIG. 13 in significantly greater detail, and 
indicates in block diagram form the functions per- 
formed thereby. As discussed generally above, vertical 
blanking interval data indicated at 152 is supplied to 
MATS 122. At this point, system data and addressed 30 
packets are stored in RAM 124 for later accessing by 
the microprocessor 114 as indicated at 170 and 172, 
respectively. The system data taken from RAM 124 at 
170 includes the service key, which as discussed above 
changes with every 16-frame cryptocycle, that is, each 35 
time a complete set of system data has been transmitted, 
all as discussed above. 

The addressed packet data supplied to RAM 124 by 
MATS 122 is supplied at 172 to microprocessor 114. As 
mentioned above, the user address portion of the ad- 40 
dressed packet, which as noted above is transmitted in 
clear text is compared by MATS 122 to a decoder iden- 
tification number stored therein at manufacture, as indi- 
cated at 175. If the numbers match, such that the ad- 
dressed packet is appropriate for processing by the 45 
particular decoder, the remainder of the addressed 
packet is supplied to microprocessor 114 as indicated at 
172 and decrypted at 176 using a secret serial number 
which is stored in the electrically erasable programma- 
ble read only memory (EEPROM) 116 at manufacture 50 
of the device, as indicated at 180. Preferably, a bar 
coded label is attached to each microprocessor chip at 
manufacture. An assembly worker wands the bar coded 
chip so that this bar code identification is supplied to an 
associated computer device. Thereafter, the computer 55 
associates a secret serial number with that decoder num- 
ber, without requiring operator intervention. The com- 
puter then writes the secret serial number to the EE- 
PROM 116. The correlation between the decoder iden- 
tification and the secret serial number stored in EE- 60 
PROM 116 is critical to the proper functioning of this 
system. Therefore, this information is guarded very 
carefully. 

The output of decryption unit 176, in addition to the 
other data contained in the addressed packets as dis- 65 
cussed above, includes the key-of-the-month (KOM), 
which as mentioned is transmitted repetitively over a 
period of a month, and in advance of the month in 



which it is to be effective, all such that each decoder can 
obtain the key-of-the-month well in advance of its being 
required for decoding of program material. The odd 
and even KOMs are stored in the EEPROM as indi- 
cated at 178. The selected KOM is supplied as indicated 
at 182 to a further decryption unit 174 and is thereafter 
used to decode the system data. As mentioned, the 
system data is transmitted frequently and repetitively, 
on the order of every one-third second, to keep the 
system control data up to date. 

As described in copending Ser. No. 883,310, filed 
July 8, 1986, the decoder can process system data from 
up to four broadcasters, one being selected by use of a 
broadcaster identification indication transmitted as part 
of the system data. Each broadcaster transmits at a 
different carrier frequency, so that the user chooses the 
"channel" in the conventional manner. The decoder 
then uses the broadcaster identification to identify the 
channel selected. Thus, in practice four sets of two 
keys-of-the-month are transmitted, four tier selections 
are stored, etc. 

The output of decryption unit 174 is supplied to a 
"seed" 184, The seed 184 is intended to refer genetically 
to means for generating a large number of control sig- 
nals and decryption keys which are, in effect, the out- 
puts of the microprocessor. For example, the seed out- 
put includes video and audio descramble signals sup- 
plied at 160, 164, respectively, to audio and video de- 
scrambler 158 and 162, respectively, as discussed above 
in connection with FIG. 13. Similarly, the decryption 
keys 156 are passed as indicated to MATS 122 for de- 
cryption of teletext data, such that personal messages 
can be decoded by the MATS from the encoded incom- 
ing VBI data 152. 

The seed 184 also has as inputs to it a number of 
signals from a device identified generically as feature 
enabling unit 188. This unit receives an input from the 
user input key pad 112 and also a number of inputs from 
the EEPROM 116. These latter inputs include such 
things as the tiers enabled, that is, the classes of pro- 
grams which the subscriber is permitted discussed 
above, the system data 170 to watch. As supplied to the 
microprocessor 114 includes program tier data indica- 
tive of whether a program being broadcast at any given 
moment belongs to a particular tier. Therefore, the seed 
combines the tier data from EEPROM 116, via the 
feature enabled unit 188 and the system data input at 
170, to determine whether to permit video descram- 
bling, as indicated by the video enable signal 160. This 
tier data, as discussed above, can also be used to control 
access of the subscriber to teletext data which may be 
provided on a payteletext basis by way of supplying 
teletext page numbers to MATS 122. 

Teletext page numbers are also supplied to MATS 
122 when, for example, the user desires to view the 
programming guide. In this case, the microprogram run 
by the microprocessor, which is stored in a ROM 117 at 
manufacture, responds to the appropriate key pad input 
by sending the appropriate teletext page number to the 
MATS, as indicated at 192. Thereafter, as discussed 
generally above, the MATS 122 reviews the page num- 
bers of all incoming teletext headers for the appropriate 
page number, and when it detects a match, grabs the 
subsequent text pages as indicated at 194. If the linked 
page flag indicates that the teletext message extends 
over more than one page, it selects plural teletext pages . 
and stores those not immediately displayed, as indicated o 
at 196, in RAM 124. If they are encrypted, as indicated 
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by the encrypted page flag, it decrypts them, as indi- referred to as system data is intended for all users and is 
cated at 198, using the key supplied at 156. Finally, if the transmitted in every 16- field crypto-cycle. The system 
page is a template, it completes the template by insert- data contains information which fully describes the 
ing user-specific information, as indicated at 200. The services currently being transmitted. These include 
user-specific information can include billing data stored 5 such matters as broadcaster identification, program 
in EEPROM 116, as indicated at 204; this may include number, program cost, program tier membership re- 
credit data indicating the user's credit status, billing data quired to view a given program, current service keys 
including, for example, what programs he has recently and so forth. 

purchased, should he desire to review his purchases, By comparison, addressed packets are encrypted 

and the like, all generally as indicated at 204. 10 uniquely for an individual decoder, and contain in- » % y r\\({v€ 

The secure microprocessor 114 may also include dividual-subscriber or user-specific information which AfLokzf * 

within it a relatively small RAM indicated at 206. This fully describes the authorization of the decoder with 

can be used to store data which is permitted to be vola- respect to a specific broadcaster or broadcaster consor- 

tile, that is, lost upon power-off of the unit, unlike the tium for a given month. A number of broadcasters or 

data which is stored in the EEPROM, which is retained 15 broadcaster consortia may independently address the 

even if power is lost to the unit Data suitable for stor- decoder [broadcaster consortia are broadcasters which 

age in RAM 206 includes such things as the user's selec- have banded together to bill their services commonly], 

tion of audio channels, and other user-selectable data. and maintain entirely separate billing systems. The ad- 

n _ . dressed packets contain information such as consorti- 

20 um/broadcaster identification, message identification, 

FIG. 15 shows in schematic form the decryption of authorized individual program numbers, authorized 

incoming data. The incoming data is supplied to a de- service tiers (text, audio, etc.), and credit updates, 
cryption algorithm as indicated at 210, as is one or more Both types of control data packets, that is, system 

keys. The keys may comprise one of the several keys-of- data and addressed packets, are encrypted during trans- 

the-month stored in EEPROM after supply to the de* 25 mission using a highly secure algorithm. They are only 

coder as part of an individually addressed packet, as decoded in a secure microprocessor which cannot be 

noted at 212, the secret serial number stored in the mi- tampered with without destruction. The products of 

croprocessor at manufacture, as noted at 214, and/or decryption are also stored in the EEPROM, which 

the system key transmitted as part of the system data in cannot be read, due to the construction of the secure 

line 3 of the VBI, as noted at 216. 30 microprocessor, detailed below. The contents of the 

The algorithm itself may comprise any one of a wide system data packet, which specifies the on-air program 
variety of decryption algorithms known to those of skill tier, are then compared with the authorized tier for the 
in the art, including that corresponding to the Data particular decoder (which are decrypted from an ad- 
Encryption Standard ("DES") published by the Na- dressed packet on a monthly basis). The services which 
tional Bureau of Standards. The algorithm chosen is 35 are authorized for reception by the decoder are derived 
immaterial to the practice of the present invention. from this comparison. Impulse purchase, wherein the 
Suitable encryption techniques are similarly within the subscriber specifically indicates to the decoder that, he 
skill of the art. In the decoder, the decryption is effected wishes to purchase a single program, is also possible; in 
most expediently in the microprogram processed by the this case, the decoder simply bypasses the tier compari- 
microprocessor 114. 40 son. The appropriate service keys are then decrypted 
EF , , and released from the secure microprocessor for use in 
er Advantages decoding the video and audio signals. This process is 

The overall operation and design of the system of the repeated in each 16-frame cryptocycle. 
invention having been described, and the decoder hav- The microprocessor used according to the preferred 

ing been detailed, a number of additional aspects, ob- 45 embodiment of the invention is referred to as "secure." 

jects, improvements and advantages of the system and This is because it is logically necessary for a subscrip- 

decoder of the invention can now be explained more tion-television decoder to have an element of physical 

fully. security. That is, if an unauthorized unit can be modi- 

As discussed above, decryption of the complete fied to be identical to an authorized unit, then the sys- 

B-MAC signal used according to this invention requires 50 tern is insecure, and the broadcaster will lose revenue, 

the secret serial number, which is written to the secure Preferably, the only difference between an unautho- 

microprocessor at construction of the decoder, the ser- rized unit and an authorized unit is in the contents of 

vice key, and the key-of-the-month. Probably the most one or more memories. This is because it is highly desir- 

vulnerable part of this sequence is the key-of-the- able to avoid having to provide physically different 

month, which is transmitted frequently over a month's 55 microprocessors, etc., for individual decoders. This 

time. However, as noted, this capture of the KOM itself would be highly cost-inefficient, 
would not be adequate to decode the signal, since the It is essentially straightforward to protect services 

service key and the secret serial number must also be during transmission by encrypting the service keys and 

captured. Moreover, the service key is 16 frames (ap- by rapidly changing the service keys in a random man- 

proximately every one-third second) such that captur- 60 ner. The main security problem arises in protecting the 

ing it will only itself allow loss of 16 frames. This also service keys from compromise during distribution, 
has the advantage that the time required for key acquisi- For that purpose, a device is required with the fol- 

tion following a channel change is limited to this period lowing characteristics: 

of time, e.g., one-third second. Therefore, the sub- (1) capable of highly sophisticated decryption tech* 

scriber does not see a substantial delay when he changes 65 niques; 

channels on his decoder. (2) factory programmable; 

As mentioned above, there are two types of control (3) immune to modification or copying; and 
data transmitted according to the invention. A first type (4) including protected non- volatile memory. 



3/8/2005, EAST Version: 2.0.1.4 



23 



4,829,569 



24 



10 



15 



It is now a routine operation to copy conventional 
custom integrated circuits, and companies exist which 
specialize in this activity. Therefore, a non-copyable 
device is required. Specifically, a Motorola No. 
MC68HC11 microprocessor, originally developed for 
use in automotive applications and the like, which in- 
cludes a protected internal non- volatile memory, is used 
for storage and processing of keys and credit informa- 
tion in the decoder of the invention. In a slightly differ- 
ent embodiment of the decoder, which is optimized for 
use in commercial applications, e.g. corporate in-house 
video communications and the like, the Motorola 
Model No. MC6870U5 is used instead. These commer- 
cial applications and the operation of the system of the 
invention in connection with them are discussed more 
fully in copending Ser. No. 883,310, filed July 8, 1986. 

In a typical microprocessor, the address bus and data 
bus are available externally to be monitored and modi- 
fied. Access can thereby be gained to the decryption 
process and to the contents of any memory connected 20 
to the bus. The processor used according to the present 
invention is operable in a secure mode in which the bus 
connection contacts are reassigned to other functions 
and in which the bus is not available externally for any 
purpose. In this condition, the internal non-volatile 25 
memory (the EEPROM) cannot be read by any known 
means. All input control packets can be securely en- 
crypted. Decrypted service keys for the authorized 
services are released only for the microprocessor's im- 
mediate use, and are valid for only sixteen frames, that 30 
is, for approximately one-third second. Therefore, dis- 
covery of any particular decrypted service key is of 
minimal use. Within the microprocessor, the secure 
information is stored as a charge pattern and cannot be 
read, even using an electron microscope. The charge 35 
pattern is lost during any physical assault using probes. 

Another important aspect of this according to the 
billing system and the user interface can be defined by 
software, such that the system can be modified "over 
the air" as needed by broadcasters without modification 40 
to the hardware. 

As described above, the service data which is trans- 
mitted system-wide at cryptocycle intervals includes 
identification by service tier of the program currently 
being transmitted. The addressed packets, which are 45 
sent to each decoder from time to time, include tier 
identification, indicating which programs the individual 
subscriber is authorized to view. This, provides substan- 
tial flexibility in programming control and in billing, 
because each subscriber can separately select those 50 
programs which he wishes to view. The choice is effec- 
tively among literally hundreds of different programs to 
be made available by a broadcaster or a consortium of 
broadcasters. 

The tier concept also allows the subscriber to eniov a 55 
t emporary tier assignment fror example, when he 
wishes to watch a particular spo rting event, he can 
c ontact the broadcaster and arrange to have that Her 
maae available to him for the period o f ti me required. 
According to an important aspect ot the invention, the 60 
decoder is also enabled to respond to the pressing of a 
"BUY" button by the subscriber, to indicate that he 
wishes to purchase a particular program at a particular 
time; the subscriber's credit is then simply debited by 
the cost of the program. 

All this is made readily possible and user-friendly by 
the use of the menu-driven user interface. That is, the 
fact that the teletext messages are continually being 
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transmitted by the broadcaster and may be selected by 
the decoder in response to user or microprocessor initi- 
ated requests gives significant, flexibility in the user/de- 
coder interface. As discussed above in connection with 
FIG. 12, the provision of teletext pages selected by the 
microprocessor in accordance with the user's input 
from the key pad allows a properly programmed micro- 
processor to lead the user through a wide variety of 
sequences of screens, thus providing any control se- 
quence deemed desirable to ensure that the various 
needs of the various users of the system are satisfied. 
The microprocessor selects the text pages displayed 
from the stream of pages transmitted, and uses the user's 
response to determine the next page to be shown. 

For example, suppose the user wishes to have a baby- 
sitter watch his children in his house for the evening. 
The system can readily be provided with means requir- 
ing the input of a specific user identification number 
before it will accept input from a "BUY" button, such 
that the babysitter is prevented from purchasing a lot of ' 
expensive programs. The tiers can similarly be defined 
such that only authorized users can access certain 
classes of programs, e.g., X-rated movies, such that the 
user need not be concerned that his children are watch- 
ing subject matter he considers inappropriate; he need 
simply input his personal user identification when he 
desires to watch such material. 

Furthermore, use of the tier concept allows each 
broadcaster to define the program tiers in any manner 
he deems desirable; he is not constrained by system 
design to assign all first run movies to channel A, all 
blue movies to channel B, all high-priced sporting 
events to channel C, public television to channel D, and 
so on; the system can be reconfigured as needed. More- 
over, the data stored in the electrically erasable pro- 
grammable read only memory which controls the as- 
signment of tiers, that is, the correlation between the 
buttons of the key pad and the programs which are 
viewed, can be varied by the broadcaster at any time 
through the use of the addressed packets. That is, an 
individual "memory patch" message can be sent to a 
decoder indicated that a particular item stored in the 
EEPROM is to be changed. The memory patch feature 
also permits updating of templates, as the EEPROM 
contains information concerning where certain user 
specific data is to be placed on the screen in conjunction 
with a particular template. In the same way, the actual 
data to be shown in connection with a particular tem- 
plate can be updated and the like. 

Another improvement in control of the use of a copy- 
righted signal which is rendered straightforward by the 
method of the present invention is as follows. Those of 
skill in the art will recognize that, in general, it is possi- 
ble for a subscriber with a video cassette recorder 
(VCR) to make a copy of substantially any program 
material transmitted. This has the obvious defect that 
the copyright proprietor tends to lose control of his 
subject matter. It is particularly exacerbated by the fact 
that at present there is no convenient way of locating 
the original copyist, that is, the individual who made the 
original copy of the copyrighted material using his 
VCR. According to the present invention, it is readily 
possible to set a "fingerprint" flag bit in the system data 
portion of the signal, which, when detected by the mi- 
croprocessor, will cause it to write the subscriber identi- 
fication number to the screen via the teletext processing 
facility. Typically, this will be done at a particular point 
in a particular program. Thereafter, the copyright pro- 
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prietor, having located an illegal copy of his copy- 
righted work made during its transmission over the 
system of the invention, can readily detect the user's 
identification number and thus track down the maker of 
the offensive copy. At the same time, the insertion of 
the user identification on the screen for but a single 
frame is barely detectable to the subscriber's eye, such 
that no significant impairment in picture quality results 
from implementation of this expedient 10 

While a preferred embodiment of the invention has 
been described in detail, this should not be taken as a 
limitation on the scope of the invention, but merely as 
exemplary thereof. Numerous additional improvements 
and modifications can be made to the system of the 15 
invention as described above without departure from its 
essential spirit and scope. Therefore, the present inven- 
tion is not to be limited by the above disclosure, but 
only by the following claims. 20 

We claim: 

1. In a subscription television system comprising a 
transmitter repetitively transmitting teletext template 
messages interspersed with video and a decoder for 
selectively receiving said teletext messages, a method 25 
for user-specific messages to a subscriber of said sub- 
scription television system the steps of: 
generating and storing user-specific data in a first 

memory location in said decoder; 3Q 
correlating said user-specific data stored in said de- 
coder with specified prints for insertion of data into 
template messages transmitted by said transmitter, 
selecting ones of said template messages transmit- 
ted by said transmitter, and user-specified data 35 
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selected in correspondence to selected ones of said 
templates, and 
displaying the template having had the user specific 
data inserted there at the specified points to the 
user as a video signal. 

2. The method of claim 1, wherein said step of select- 
ing a template is performed by said decoder in response 
to user input 

3. The method of claim 2, wherein said step of select- 
ing a template in response to a user input is performed 
by said decoder in response to correlation of a specified 
user input code to a stored code indicative of a template 
appropriate for response to said user input, and for 
selecting a template corresponding to said stored code 
responsive thereto. 

4. The method of claim 3, wherein if said template 
selected for appropriate response to user input com- 
prises a message larger than suitable for display at a 
given time to a user, the additional steps of transmitting 
an indication with a first portion of said message that a 
subsequent portion of said message follows in a trans- 
mission sequence, and selecting said subsequent portion 
and storage thereof at said decoder are performed. 

5. The method of claim 4, wherein said subsequent 
portion is selected and stored prior to any user input 
indicating that the user wishes to view the subsequent 
portion of the message. 

6. The method of claim 1, wherein said template is 
selected in response to a determination made by said 
decoder that a particular message should be displayed 
to said subscriber. 

7. The method of claim 6, wherein said determination 

made by said decoder is in response to evaluation of the 

credit or billing status of said subscriber. 

***** 
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Col. 22, line 2, "crypto-cycle" should be -cryptocycle-. 
Col. 23, line 1, delete paragraph indention at beginning of line. 
Col. 24, line 3, after "significant", delete the period, 



3/8/2005, EAST Version: 2.0.1.4 



UNITED STATES PATENT AND TRADEMARK OFFICE 

CERTIFICATE OF CORRECTION 

PATENT NO. : 4,829,569 ^ 3 ' 

DATED May 9, 1989 

INVENTOR(S) : NIGEL SETH-SMTTH, ET AL. 

It is certified that error appears in the above-identified patent and that said Letters Patent is hereby 
corrected as shown below: 

Col. 25, line 24, after "video", insert -signals-; 

line 27, after "system", insert -, comprising- 
line 31, "prints" should be -points-; 

line 35, after "and", insert -inserting-; "user-specified" should be ~\ 

specific-. 

Col. 26, line 4, "there" should be -therein-. 



Attest: 



Signed and Sealed this 
Thirteenth Day of September, 1994 



BRUCE LEHMAN 

Attesting Officer Commissioner of Patents and Trademarks 



3/8/2005, EAST Version: 2.0.1.4 



